Privacy Policy
How this website handles your data
What this policy covers
This policy covers the website syncd.health, asking for a free intro call with Amber by email, and booking a paid call with her by email. The website provides information about Syncd Health. There is no user account, no forms, and no newsletter here. You can visit the website without providing any personal details. What is processed technically is described below. To visit the website, you are under no statutory or contractual obligation to provide us with any data; without the technical access data described below, however, the website cannot be delivered. For a free intro call, we need your email address; without it we cannot arrange the call. For a paid call, we need your name, your email address and your explicit consent described below; without them we cannot enter into the contract or hold the call. The contract includes paying the invoice after the call.
Controller
Syncd Health GbR Represented by its partners Amber Hoffman and Eric Walter Fürbringerstr. 22 10961 Berlin Germany
Email: hello@syncd.health
Hosting and server logs
The website runs on Google Cloud Run in the europe-west1 region (Belgium, EU). When you open a page, the server automatically processes technical access data:
- •your device's IP address
- •date and time of the request
- •the page requested
- •browser and operating system (user agent)
- •the page you came from, if your browser sends it
We need this data to deliver the website, find errors, and defend against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).
Server logs are deleted automatically after 30 days.
Cookies
This website sets no more than one cookie: NEXT_LOCALE. It stores the language of the page you open (German or English) if that differs from the language your browser prefers, or once you switch languages, and is deleted when you close your browser. It contains no identifier that could recognize you.
This cookie is technically necessary for showing the site in your chosen language (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). No consent is required for it, which is why there is no cookie banner.
Analytics and tracking
We currently use no analytics or tracking tools. No visitor profiles are created and no data is processed for advertising. If we introduce an analytics tool in the future, we will update this policy first and ask for your consent where required.
Asking for a free intro call by email
To ask for Amber's free 15-minute intro call, you write to hello@syncd.health; the button on Amber's page opens a prepared email for this. We then receive your email address, your message, the times you suggest or pick, and your name if you give it.
We use this only to arrange and hold your intro call on Google Meet. To connect the call, Google processes technical data such as your IP address and information about your device, the name you join with, and the sound and picture of the call while it runs. We do not record the call. The legal basis is that you asked us for the call (Art. 6(1)(b) GDPR).
Asking for this call shows that you are looking for a therapy place, and the GDPR counts that as information about your health. That is why we need your explicit consent (Art. 9(2)(a) GDPR). The prepared email already contains one sentence for this. By sending the email, you agree that we use what your request shows about your health only to arrange and hold the call. If you remove that sentence, Amber will ask you once for your consent before arranging the call. Please leave health details out of your email; email is not end-to-end encrypted. You can withdraw your consent at any time by writing “stop” to us, in the same email thread or to hello@syncd.health; this does not affect anything we did before. We then delete your emails, apart from the proof described below.
There is one exception. If your email sounds like you may be in danger right now, Amber writes back with emergency and crisis numbers immediately after the email has been read, even if you have not given your consent; we do this only to protect your life and health (Art. 6(1)(d) GDPR), use your email for nothing else and delete it as described below.
Our email inboxes, Google Calendar and Google Meet run on Google Workspace (Google Cloud EMEA Limited, Dublin, Ireland) on our behalf (data processing agreement, Art. 28 GDPR). We have set Google Workspace to store our emails and calendar entries in the EU. Even so, Google may process them outside the EU, including in the USA; the same goes for the connection data of a Google Meet call, which this setting does not cover. For the USA, the basis is the EU-US Data Privacy Framework (an adequacy decision, Art. 45 GDPR), under which Google LLC is certified; for other countries outside the EU, it is the EU standard contractual clauses (Art. 46(2)(c) GDPR).
We delete your emails, including from the trash, 30 days after the intro call (or after our last email, if no call takes place), or 14 days after your first email if you have not given your consent. If you then book a paid call, the section on paid calls below applies. We keep only the emails that show your consent, and any “stop”, apart from everything else, and use them for nothing else. The GDPR requires us to be able to show that you consented. We keep this proof for 3 years from the end of the calendar year in which we deleted the rest of your emails, because that is how long claims about how we used your emails can normally be raised (Sections 195 and 199 of the German Civil Code). The legal basis is this duty (Art. 6(1)(c) with Art. 7(1) GDPR) and our legitimate interest in being able to defend ourselves (Art. 6(1)(f) GDPR). Because the proof shows that you were looking for a therapy place, we keep it only in case we need it for a legal claim or a complaint (Art. 9(2)(f) GDPR). It does not rest on your consent, so it stays after a “stop”.
Booking a paid call by email
Amber offers a paid 45-minute navigation call by video, with your next steps in writing and up to two short follow-up calls. You ask for it by email, Amber sends you an offer, and you book by replying to it; there is no form on the website for it. For this we process your name and email address, the emails we exchange to arrange the calls, the dates and times of the calls, the invoice and your payment (the name and account on your transfer, the amount and the date), and your written next steps.
We use this to arrange and hold the calls, to send you your next steps in writing, to invoice you and to keep our accounts. The legal basis is our contract with you, or the steps before it that you ask for (Art. 6(1)(b) GDPR). For invoices and payment records, it is also our legal duty to keep them (Art. 6(1)(c) GDPR).
Booking a call about finding a therapy place says something about your health, which the GDPR specially protects. So Amber's offer email asks for your explicit consent (Art. 9(2)(a) GDPR). We use what your booking and the calls show about your health only to arrange and hold the calls and to write your next steps in a Google Docs file, share it with you and keep it. You can withdraw your consent at any time, for example by emailing hello@syncd.health; this does not affect what we did before. What the law requires us to keep (invoices, payment records, and emails about the contract, an invoice, a payment, a withdrawal or a refund) stays for the periods below, even after you withdraw your consent. We do not record the calls.
The calls take place on Google Meet. To connect a call, Google processes technical data such as your IP address and information about your device, the name you join with, and the sound and picture of the call while it runs. Your calendar invitation shows that a call with us is booked.
For a paid call, these also see your details:
- •Google Cloud EMEA Limited, Dublin, Ireland (Google Workspace): our email inboxes, Google Calendar, Google Meet and Google Docs, on our behalf (data processing agreement, Art. 28 GDPR). We have set Google Workspace to store our emails and calendar entries in the EU. Amber writes your next steps in a Google Docs file in our Google Workspace and shares it only with your email address.
- •Vivid, where our business account is held, receives your transfer with the name and account it comes from.
- •If we work with a tax adviser, they receive our invoices, books and bank statements for our bookkeeping and tax returns. Tax advisers are bound to professional secrecy.
Google may still process emails, calendar entries, the Google Docs file with your next steps and Google Meet connection data outside the EU, including in the USA; the EU storage setting does not cover Meet connection data. For the USA, the basis is the EU-US Data Privacy Framework (an adequacy decision, Art. 45 GDPR), under which Google LLC is certified; for other countries outside the EU, it is the EU standard contractual clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards at hello@syncd.health.
We keep our books for 10 years; invoices, payment records and bank statements for 8 years; and the emails that make up the contract or concern an invoice, a payment, a withdrawal or a refund, including yours, for 6 years. Each period starts at the end of the calendar year of the email, the document or the last entry in the books (Section 147, German Fiscal Code). It runs longer while the deadline for assessing a tax these records matter for has not passed. We delete other emails about your booking once we no longer need them for the calls, and your next-steps Doc when you withdraw your consent or ask us to, at the latest 12 months after our last contact.
Contact by email
All contact options on this website open your own email program. When you write to us, we process your email address and the content of your message in order to respond.
The legal basis is the initiation or performance of a contract where your inquiry is aimed at one (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).
We delete your message once your inquiry is resolved and no statutory retention obligations apply.
Please do not include details about your health in an email. It is enough to tell us what your inquiry is about.
Recipients of your data
We pass your data on to technical service providers who process it on our behalf and under our instructions (data processing agreements, Art. 28 GDPR):
- •Google Cloud EMEA Limited, Dublin, Ireland: hosting of the website and storage of server logs in the EU (Belgium region)
- •Google Cloud EMEA Limited, Dublin, Ireland (Google Workspace): our email inboxes, when you write to us
- •Beyond that, we only share data where we are legally required to, or as described for intro and paid calls above.
Transfers to third countries
The website is operated in the EU. Google's parent company is based in the US; in individual cases, such as technical support, access from the US cannot be ruled out. For the US we rely on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR). The same applies to Google Workspace, which runs our email inboxes, the intro and paid calls and the shared Google Docs file with your next steps (see above). Beyond this, no third-country transfers take place.
Your rights
Under the GDPR, you have the following rights towards us:
Access (Art. 15 GDPR)
You can find out what data we have stored about you
Rectification (Art. 16 GDPR)
You can have incorrect data corrected
Erasure (Art. 17 GDPR)
You can request the deletion of your data
Restriction of processing (Art. 18 GDPR)
You can request that we restrict how we process your data
Data portability (Art. 20 GDPR)
You can receive your data in a common, machine-readable format
Objection (Art. 21 GDPR)
You can object, on grounds relating to your particular situation, to processing we base on our legitimate interest. Here, that concerns the server logs, answering emails and keeping proof of your consent.
Withdrawing your consent (Art. 7(3) GDPR)
You can withdraw your consent at any time; this does not affect anything we did before. For an intro call or a paid call, a short email to hello@syncd.health is enough.
Just write to hello@syncd.health. We will respond within one month at the latest.
No automated decision-making
No automated decision-making and no profiling take place on this website.
Right to lodge a complaint
If you believe we are not processing your data lawfully, you can complain to a data protection supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59-61 10555 Berlin, Germany
https://www.datenschutz-berlin.deYou can also contact the supervisory authority where you live.
Links to other websites
This website links to external services, for example our LinkedIn page. When you follow such a link, that website's own privacy policy applies.
Changes to this policy
If anything about the website changes that affects how your data is processed, we will update this policy. The current version is always available on this page.
Last updated: 9 October 2026